CallonDoc, Inc. notified the Washington State Attorney General in September 2026 about a data breach affecting an undisclosed number of individuals. The specific data types involved have not been publicly disclosed. Affected individuals should monitor their credit reports, watch for phishing attempts, and consider a fraud alert or credit freeze as a precaution.
| Company | CallonDoc, Inc. |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Not Publicly Disclosed |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Washington State Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the CallonDoc, Inc. Data Breach?
CallonDoc, Inc. recently filed a formal data breach notification with the Washington State Attorney General. This filing confirms that the company experienced an incident involving unauthorized access to its systems or data. As a result, affected individuals are now being notified under state law.
The exact discovery date of the breach has not been publicly disclosed. However, the notification itself was filed in September 2026, which means the company had already completed at least part of its internal review by that point. Because many details remain limited, the full timeline of how the incident unfolded is still unclear.
At this stage, the public filing does not specify the attack method used against CallonDoc, Inc. Whether the incident involved ransomware, unauthorized network access, or another intrusion method has not been stated. In response, the company appears to have carried out some form of investigation before issuing its notification, though further forensic findings have not been made public.
Who was affected?
The notification indicates that individuals connected to CallonDoc, Inc. were affected by this breach. Because the company provides healthcare-related services, those impacted may include patients or customers who used its platform. However, the source does not specify whether employees were also involved.
The total number of affected individuals has not been publicly disclosed. Similarly, the geographic scope of the breach is unclear, though the filing with Washington’s Attorney General suggests at least some Washington residents are affected. Because telehealth services often serve patients nationwide, it is possible the impact extends beyond one state, though this has not been confirmed.
What Information Was Potentially Exposed?
The specific types of information involved in this breach have not been publicly disclosed. As a result, it is not yet clear which categories of personal data may have been accessed or acquired by an unauthorized party.
Even without confirmed details, incidents like this often raise concerns about identity theft. For instance, if contact details or identification numbers were involved, affected individuals could face an increased risk of phishing attempts or fraudulent account openings. This risk exists broadly across data breaches, regardless of the exact categories involved.
In addition, because CallonDoc, Inc. operates in the healthcare space, any breach involving a medical services provider can understandably cause added worry. Still, until more specific information is released, affected individuals should treat the situation cautiously rather than assume any particular data type was compromised. Monitoring for unusual account activity remains a sensible precaution either way.
What is the company doing?
CallonDoc, Inc. has taken the step of formally notifying the Washington State Attorney General about this incident. This filing is a required legal step when a breach affects residents of that state. Therefore, the notification itself reflects an acknowledgment that some form of data exposure occurred.
The company also filed formal notification with the Washington State Attorney General, as confirmed by the publicly available filing. Beyond this notification, the source does not describe additional remediation steps, such as system hardening or specific credit monitoring offers. Because further details have not been made public, affected individuals should watch for a direct notification letter from the company, which may include more specific guidance.
What Should Affected Individuals Do?
Monitor Your Credit Reports Regularly
Affected individuals should check their credit reports for unfamiliar accounts or inquiries. This is a simple, free step that can reveal early signs of identity theft. You can request free reports from each of the three major credit bureaus through AnnualCreditReport.com.
Because fraud does not always appear immediately, it helps to check reports periodically rather than just once. In addition, reviewing your bank and credit card statements on a regular basis can catch suspicious charges early. Acting quickly after spotting anything unusual gives you the best chance of limiting damage.
Stay Alert for Phishing Attempts
After a data breach, scammers often send emails or texts pretending to be the breached company. These messages may try to trick you into clicking malicious links or sharing login credentials. As a result, it’s wise to avoid clicking links in unexpected messages, even if they look official.
Instead, go directly to the company’s official website or call a verified phone number if you need to confirm anything. This habit protects you whether or not your specific information was involved in this breach. Because phishing attempts often increase after breach news becomes public, staying cautious now is especially important.
Consider a Fraud Alert or Credit Freeze
Although the specific data types exposed in this breach have not been confirmed, placing a fraud alert can still add a layer of protection. A fraud alert requires lenders to take extra steps to verify your identity before approving new credit. This makes it harder for someone to open accounts in your name.
For stronger protection, you can also consider a credit freeze, which restricts access to your credit file entirely. This step is free and can be lifted temporarily whenever you need to apply for credit yourself. Because both options are relatively easy to set up, they are worth considering as a precaution.
Keep Records and Watch for Official Notices
If CallonDoc, Inc. sends a direct notification letter, keep it along with any other breach-related correspondence. These documents may become useful if you need to prove you were affected, especially if financial losses occur later. Additionally, they may be relevant if you choose to speak with an attorney about your options.
Many individuals affected by breaches like this consult a data breach attorney for a free case evaluation. This can help clarify whether you may be eligible for compensation. Because deadlines for legal claims vary, it helps to seek guidance sooner rather than later.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
Official data breach notification report (PDF) from Washington State Attorney General